Legal

Privacy & Cookies

Last updated: 10 November 2026

We collect as little as we need, use it only to reply to you and do our work, and never sell it. This page explains what we hold, why, and how you can control it.

Who we are

This website, brandtheorem.com, including Caravanserai at brandtheorem.com/caravanserai, is run by Brand Theorem Limited, a company registered in England & Wales (company no. 16280860), at Suite 3, Richfields Congress House, 14 Lyon Road, Harrow, Middlesex, HA1 2EN.

Brand Theorem Limited is the data controller for the personal data described here. Questions about this policy or your data can go to hello@brandtheorem.com, or to caravanserai@brandtheorem.com for Caravanserai.

What we collect

When you contact us

If you use a contact or enquiry form, or email us, we receive what you send: usually your name, email address, organisation and your message. Caravanserai booking enquiries may also include a preferred format, date and group size.

When you join the Caravanserai mailing list

We receive the details you enter on the sign-up form, such as your name and email address.

When you visit the site

Our hosting provider automatically records basic technical information, such as your IP address, browser type and the pages requested, to deliver the site and keep it secure. We don't use this to identify you.

We don't ask for sensitive information. Please don't include it in a message.

How we use it, and why

• To reply to your enquiry and, if we work together, to plan and deliver the work. This is in our legitimate interests, or a step you've asked us to take before entering a contract.
• To send Caravanserai event news, only if you've signed up. This is based on your consent. You can unsubscribe at any time.
• To run and protect the website, which is in our legitimate interests.
• To meet legal obligations, for example keeping business and accounting records.

We never sell your data, and we don't use it for advertising.

Who we share it with

Only with the service providers that run the site and our inbox, who process it on our instructions:

• Netlify: website hosting, and the Caravanserai enquiry form.
• FormSubmit: delivers messages from the Brand Theorem contact form to our inbox.
• Google: the Caravanserai mailing-list form, and the web fonts this site uses.
• Our email provider: where your messages and our replies are stored.

We may also share data where the law requires it.

International transfers

Some of these providers process data outside the UK, including in the United States. Where they do, we rely on the safeguards UK data protection law recognises, such as the UK–US data bridge or the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Enquiries: up to two years from our last contact, unless we start working together.
• Client records: for as long as the work runs, then up to six years for legal and accounting purposes.
• Mailing list: until you unsubscribe or ask us to remove you.

Your rights

Under UK data protection law you can ask us to:

• see the personal data we hold about you
• correct it, or delete it
• restrict how we use it, or object to our use of it
• give you a copy in a portable format
• stop using it where you gave consent (this won't affect anything we did before)

To use any of these rights, email hello@brandtheorem.com. We'll respond within one month.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

We don't set cookies, and we don't use analytics, advertising or tracking tools. Our fonts load from Google Fonts, so your browser shares your IP address with Google when a page loads.

Some links take you to other services, such as Substack, Revolut, Instagram or Google Forms. Those services have their own privacy and cookie policies.

Changes to this policy

If we change how we handle personal data, we'll update this page and the date at the top.